Static task
static1
Behavioral task
behavioral1
Sample
ae4aec3ab79d7a8870d1874f09713919bad1c773d9fac4564e3fe7934da85f56.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae4aec3ab79d7a8870d1874f09713919bad1c773d9fac4564e3fe7934da85f56.exe
Resource
win10v2004-20240704-en
General
-
Target
9087bcbde4da434ce10aa2e2fbc0ccf5.bin
-
Size
282KB
-
MD5
08fb409d8b67a87668c26cc2e4e19c50
-
SHA1
f3240ed62375947469f424adb5b0c8197b1988c0
-
SHA256
157a61f2ed170b4fd717ed1549237298a1e47770a18698367de07b4604da7ed5
-
SHA512
945996642fea03f542ef3c7c33d0982372f806639605f165b7f76afb5b9e6f35a74483bd3fa3504038b6762a0f305b64b2f44c5a87589240ab83d2993eac29f8
-
SSDEEP
6144:Don/emNB7rfa8WxcrdpcuyDvJJfHqumvITevJDLZjDj:Doem7/DouMJChPJ/ZjDj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ae4aec3ab79d7a8870d1874f09713919bad1c773d9fac4564e3fe7934da85f56.exe
Files
-
9087bcbde4da434ce10aa2e2fbc0ccf5.bin.zip
Password: infected
-
ae4aec3ab79d7a8870d1874f09713919bad1c773d9fac4564e3fe7934da85f56.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ